Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4239362407511F0B30B2F7ADAE4EC9C.roa
File: E4239362407511F0B30B2F7ADAE4EC9C.roa (raw, json)
Hash identifier: u2hqibhB5LmcQSSkWCPT41lFfBR6NA9nbauV6hkwOjg=
Subject key identifier: DF:B4:2B:21:77:12:DC:B8:CE:2F:8C:EB:F5:CA:AF:78:49:53:A6:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 018477
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4239362407511F0B30B2F7ADAE4EC9C.roa
Signing time: Tue 03 Jun 2025 12:25:53 +0000
ROA not before: Tue 03 Jun 2025 12:25:48 +0000
ROA not after: Tue 15 Jul 2025 12:25:48 +0000
asID: 63139
IP address blocks: 154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.182.0/24 maxlen: 24
154.203.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 07 Jun 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99447 (0x18477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 12:25:48 2025 GMT
Not After : Jul 15 12:25:48 2025 GMT
Subject: CN=683ee9d1-89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fb:cc:39:ef:95:de:2f:07:e0:f6:d8:36:16:
24:77:c5:0e:48:fd:52:01:f1:c3:85:65:58:d2:e0:
05:31:7f:59:93:87:41:a5:e1:da:b2:8c:90:58:17:
6a:05:da:4e:4e:17:3c:d0:81:e2:bb:54:90:1a:4f:
de:a6:0a:20:13:85:78:34:1f:6d:a9:0c:08:9a:1d:
64:67:9f:df:fe:29:8b:c3:82:d8:f9:fe:0e:95:15:
ce:13:ea:67:31:f2:86:d9:14:a7:47:da:85:73:a3:
d1:28:0c:6f:7c:a9:49:b4:95:c5:f7:8a:1e:3f:f7:
41:93:ef:be:d2:82:8a:c9:27:a8:24:1a:0a:d3:fa:
36:ce:d5:15:53:e0:b2:9c:7c:f7:d3:13:31:76:f8:
58:da:49:81:a8:5f:81:9c:12:ae:9a:78:47:3b:22:
9c:25:f2:f6:1c:47:58:98:9b:bb:29:1c:5f:52:01:
96:10:45:c0:18:c2:e2:03:6c:d0:f7:6d:ab:37:be:
12:b7:9d:78:47:7c:fa:6b:ba:b0:75:16:dd:e5:b1:
65:02:70:32:6b:51:72:39:d3:d6:e8:4a:b9:e7:72:
74:70:3a:e4:c5:48:7c:d3:e9:af:b9:c3:88:c2:5e:
d4:a1:37:29:e9:ff:55:82:2d:ab:5c:8f:68:e2:ce:
6e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B4:2B:21:77:12:DC:B8:CE:2F:8C:EB:F5:CA:AF:78:49:53:A6:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4239362407511F0B30B2F7ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.171.0/24
154.203.173.0-154.203.177.255
154.203.180.0/22
Signature Algorithm: sha256WithRSAEncryption
34:9c:a0:00:66:37:b0:dc:92:e2:df:10:43:30:d7:c4:c8:7b:
2d:ad:0b:8a:a3:16:09:52:e1:46:c9:51:30:63:6f:b1:5c:9b:
f7:60:96:a3:c7:7e:64:af:b2:ea:4e:b6:ac:3e:8d:3a:5c:65:
07:ef:13:6c:c6:71:74:75:da:19:0a:81:78:b4:fe:a2:78:1a:
70:46:c3:e3:29:28:3a:33:f2:80:64:91:56:7b:38:bc:6c:9c:
97:0c:3b:9c:95:77:90:c0:87:33:08:90:05:3d:13:b1:1d:ba:
63:80:be:8e:be:a0:97:ac:9a:9a:c0:5b:8f:14:d9:7a:48:7f:
49:76:5a:6f:2b:63:87:18:4a:03:ff:1b:85:eb:30:c3:67:e1:
d8:0c:aa:a1:19:48:11:57:2c:85:6e:d6:ac:0f:ab:a7:22:98:
25:35:e1:08:54:3a:44:82:21:7c:da:de:4e:84:46:12:e7:94:
86:ce:be:c6:e7:13:70:08:e1:a7:b5:26:d5:0b:2c:f7:c1:7a:
63:a5:11:77:46:d4:1f:cf:8b:ce:3f:29:80:36:79:f2:fa:58:
90:59:04:e8:e2:1c:8c:da:6d:e3:c2:03:9b:79:1e:c4:a5:8c:
bd:45:85:14:ee:a0:87:f7:4f:33:68:73:bf:63:d2:19:0b:15:
1d:8f:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:54:28 2025 by rpki-client